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NRS AUDIT AND RISK COMMITTEE MEETING 
3 September 2020 
Conference call 


ARC Members 

Colin Ledlie (Chair) NRS Non-Executive Director 

Bill Matthews NRS Non-Executive Director 

Christine Martin NRS Non-Executive Director 

ARC Attendees 

Asif Haseeb External Auditor — Audit Scotland 

Jonny Steen External Auditor — Audit Scotland 

Kate Moffat Internal Auditor — Scottish Government 
Lorraine Twyford Internal Auditor - Scottish Government 
Linda Sinclair NRS, Director of Corporate Services & Accountable officer 
Steven Hanlon NRS, Chief Financial Officer 

Lesley Smillie NRS Census Director team (Item 3) 

Gary Stewart NRS, Head of IT Security (Item 2) 

Paula Gellatly NRS, Business Management, Secretariat 
Apologies: 

Paul Lowe NRS, Chief Executive 


1. Welcome, Introductions and Declaration of Interests 


1.1 The Chair welcomed everyone to the meeting. Apologies were noted from Paul 
Lowe. There were no new declarations of interest. 


2. Minutes and Actions 


2.1 The minutes of 28 May 2020 were accepted. The minutes would be published 
on the NRS Website Governance page. 


2.2 Gary Stewart provided an oral update to action A03/20. The Committee were 
content to close the action as complete. 


2.3 Updates to other actions were noted. 
3. NRS Census 2022: Update Report- Lesley Smillie 


3.1 Lesley Smillie provided Committee members with an update on the programme 
status. The following items were discussed: 


3.1.1 An eight week re-planning phase had launched on 28th July following the 
Ministerial decision to move to a March 2022 Census delivery date. Plans were 
in place to engage with suppliers on the commercial and contractual impacts of 
the plan. 


3.1.2 Resource challenges continued to impact delivery across much of the 
programme. A view of all critical vacancies and associated costs was being 
continuously refined in line with re-planning activities. 
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3.1.3 Estimates of the financial impact of changing Census date to March 
2022 had been prepared. It was noted that the current estimates were heavily 
assumptions based and work continues to facilitate a revised financial position 
for the programme, as a result of the decision. A period of costing and 
consolidation activity would inform the programme’s revised financial profile 
once initial commercial and resourcing inputs had been received. Initial views 
of the revised financial profile would be indicative and assessed from an 
affordability and value for money perspective 


4. NRS Annual Report and Accounts 2019-2020 for approval 


4.1 NRS Annual Report and Accounts 2019-2020 and covering paper - Linda 
Sinclair/Steven Hanlon 


4.1.1 The Committee had been provided with a draft copy of the NRS Annual 
Report and Accounts (AR&A) for 2019-2020. Steven Hanlon summarised key 
points from the paper. 


4.1.2 The Committee reviewed the governance statement in the annual report 
noting the Reasonable Assurance opinion from Internal Audit. 


4.1.3 Ahead of approving the AR&A the Committee sought the opinion from 
NRS’s External Auditors, Audit Scotland. 


4.2 External Audit — Annual Report 2019-2020 and ISA 260 covering letter - Asif 
Haseeb and Jonny Steen 


4.2.1 Asif Haseeb introduced the ISA 260 Covering Letter and Annual Audit 
Report to the Committee. The main findings and key messages of the report 
were drawn to the Committee’s attention by Jonny Steen including noting 
Ongoing progress with KPIs, securing VFM in resourcing, championing 
equalities duties and governance documentation underpinning internal 
statement of assurance. 


4.2.2 The Annual Report and Accounts for the year ended 31 March 2020 
were due to be approved by the Audit & Risk Committee on 3 September 2020. 
The independent auditor's reported that: 


e The financial statements gave a true and fair view and were properly prepared 
in accordance with the financial reporting framework; expenditure and income 
were regularly monitored and in accordance with applicable enactments and 
guidance. 

e The audited part of the remuneration and staff report, performance report and 
governance statement were all consistent with the financial statements and 
properly prepared in accordance with the relevant legislation and directions 
made by Scottish Ministers. 
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e The accounting framework was changed due to COVID-19 16. NRS financial 
statements complied with the Government Financial Reporting Manual 
(FReM). 


e The impact of COVID-19 had delayed the planned Census delivery from 
March 2021 to March 2022, which had been agreed as anon-adjusting event. 
Significant revisions in the Annual Report and Accounts were required to 
disclose the latest position. An ‘Emphasis of Matter’ paragraph was included 
in the independent auditor’s report to draw attention to the impact of COVID- 
19 on land and building valuations. 

e There were no delays to the audit as aresult of COVID-19. All working papers 
were provided electronically and the audit team were able to complete the 
audit remotely. The working papers provided with the unaudited financial 
statements were of a high standard and finance staff provided good support to 
the audit team which was critical in helping ensure the audit process ran 
smoothly. 


4.3 ARC Annual Report 2019-2020 to the NRS Chief Executive, Accountable 
Officer and Strategic Board — Colin Ledlie 


4.3.1 The Audit and Risk Committee (the Committee) of NRS completed its 
programme of work for 2019-2020 and was satisfied that the range of 
assurances and evidence of effective internal controls, together with responses 
to strengthen internal controls, supplied to the Committee were sufficiently 
reliable to provide overall assurance and support to the Accountable officer and 
to the Management Board in their financial stewardship responsibilities. 


4.3.2 Sources of assurance considered by the Committee during the year 
included reports from the external auditors, internal auditors, objective scrutiny 
of risk management systems, and internal controls reports received from 
management. 


4.3.3 The Committee was satisfied with the quality and relevance of the 
reports it received from both the external auditors and internal auditors. 


4.3.4 The Committee noted the “Reasonable Assurance” opinion received 
from internal audit which was an improvement from the prior year “Limited 
Assurance” opinion. The Committee noted the areas reviewed by internal audit 
during the year, the challenges associated with the Census programme and 
discussed with management areas of strength and opportunities for 
improvement in risk management and control. 


4.3.5 The Committee were content to recommend that the Accountable Officer 
approve and sign the NRS Annual Report and Accounts for 2019-2020 (AR&A). 


4.3.6 The NRS Accountable Officer and Audit Scotland would sign the AR&A 
and submit it to the Auditor General for clearance before it is laid in the Scottish 
Parliament. 
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4.3.7 The Committee approved the Audit and Risk Committee Annual Report 
which would subsequently be published on the NRS website 


A05/20 Action: To provide an update on resourcing strategies in NRS to 
ensure VFM in the balance of permanent and contract resources at the next 
ARC meeting in December 2020. Action Owner: Linda Sinclair 


5. NRS Finance Report 2020-2021 — End Period 3 


5.1 Steven Hanlon presented the report which asked members to note the financial 
position at the end of period 3 of 2020-2021. 


5.2 The projected overspend has decreased by £166k to £428k, compared to the 
approved budget, primarily as a result of savings due to COVID-19. 


5.3 £1.5m of the capital budget was currently unallocated, and decisions would be 
required in the near future on how this was to be deployed and effectively utilised. 


6. Internal Audit Progress Report for Audit and Risk Committee — Lorraine 
Twyford and Kate Moffat 


6.1 Lorraine Twyford introduced the paper and indicated the 2020-2021 plan had 
been revised to take into consideration impacts relating to the COVID-19 pandemic 
and rescheduled Census to March 2022. 


6.2 Aplanned review of the NRS approach to the response to People Survey would 
be amended. This would be split into two parts, the first, a short advisory piece to 
provide insights into the analysis and proposed improvement plan developed by 
NRS would be taken forward during 2020-2021, quarter 2. The second part would 
be planned for audit year 2021-22, as a culture review, to capture staff views and 
gauge how the implementation plan had impacted NRS. 


6.3 An additional review of financial income and electronic payment card usage had 
been agreed for 2020-2021, quarter 2, to assess the continued effectiveness of 
controls while working from home arrangements are in place. 


6.4 Internal Audit and the NRS Accountable Officer would meet towards the end of 
Q2 (October 2020) to discuss the proposals for Q3 activities. 


7. Audit and Risk Committee Terms of Reference and Checklist Review 
7.1 The Committee had considered the minor amendments to the Terms of 


reference and agreed the business planned for the coming year. The Committee 
approved the Terms of Reference. 
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7.2 Colin Ledlie invited comments from the Committee on the self-assessment 
report. After a short discussion, The Committee noted the content of the report and 
provided approval. 


8. Committee Documents to Note and Questions 
8.1 NRS Governance Report 


8.1.1 Linda Sinclair presented the report, inviting comments, the following 
topics were raised: 


8.1.2 The NRS business plan for this year had been published on the NRS 
website. This document sets out what was delivered and achieved during 2019- 
2020 and reported the business priorities for 2020-2021. 


8.1.3 Progress on developing the NRS long term strategy which would set out 
the long term vision for the organisation, had been impacted by COVID-19. The 
work was now progressing with engagement from all NRS Directors, external 
facilitation and workshops planned. 


8.1.4 Under the NRS business continuity arrangements a gold response team, 
the Incident Management Team (IMT), continued to meet by exception, to 
provide strategic direction to the NRS response to COVID-19 and align 
approaches and planning to the Scottish Government's Coronavirus (COVID- 
19): Framework for Decision Making: Scotland's Route Map. It was noted that 
IMT had taken responsibility for health and safety arrangements and 
management during this crisis. 


8.1.5 NRS Estates continued to focus on ensuring buildings were COVID-19 
safe. A COVID-19 Secure Buildings Working Group had been established to 
ensure building assessments, physical distancing rules and occupational risk 
assessments were in place to enable services identified and agreed as critical 
to resume with plans in place to ensure identified essential staff were fully 
secure. 


8.1.6 Audit Scotland suggested a review of arrangements NRS had put in 
place in view of a COVID-19 guide published by Audit Scotland may provide 
assurance on arrangements and highlight any key issues for consideration. 


A06/20 Action: To review the COVID-19 management arrangements NRS 
has in relation to the Audit Scotland COVID-19 Guide, to be reported at the 
next ARC meeting in December 2020. Action Owner: Linda Sinclair 


8.1.7 Project and Programme Portfolio Management continued to be reviewed 
by the Digital and Strategy Board, chaired by the Delivery Director, Carla 
McHendry. 
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8.2 NRS Assurance activities update 


8.2.1 Linda Sinclair reported that an assurance map would be presented to 
the Committee at the next meeting in December 2020 to provide the Committee 
with a summary update of current and ongoing assurance. 


8.3 NRS Audit Recommendations Status Report 


8.3.1 Linda Sinclair introduced the report and invited comments from the 
Committee. 


8.3.2 Internal Audit recognised the considerable progress made by NRS to 
close off a number of historic recommendations and welcomed this 
improvement. 


9. Forward Look Audit and Risk Committee and Executive Management 
Board 


9.1 The report was included for information and outlined proposed ARC business 
for the next twelve months. Business for the next meeting would include IT Delivery 
deep dive and a Census report. 


9.2 The ‘forward look’ sets the Committee agendas for the year ahead in 
accordance with the terms of reference and taking account of specific requests by 
the Committee in-year. 

10. Any other Business 


10.1 No other business was noted 


11. Date of next meeting 


11.1 The next meeting was planned for 10 December 2020. 
END 


